EXPOSURES › CVE-2025-14733
CVE-2025-14733
HIGH ⌖ ON CISA KEV · EXPLOITEDWatchGuard Firebox suffered an unpatched OOBW vulnerability allowing remote code execution through the IKEv2 VPN process.
An unpatched out-of-bounds write vulnerability in WatchGuard Firebox's IKEv2 VPN process allowed remote attackers to execute arbitrary code, posing a significant security risk to DIB organizations.
Shame score — Remote attackers could exploit an unpatched vulnerability to execute arbitrary code, leading to potential data breaches or system compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.